actions / attest-sbomLinks
Action for generating SBOM attestations for workflow artifacts
☆40Updated last week
Alternatives and similar repositories for attest-sbom
Users that are interested in attest-sbom are comparing it to the libraries listed below
Sorting:
- An Action for printing OIDC claims in GitHub Actions.☆109Updated last month
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆107Updated 2 months ago
- ☆54Updated last week
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆213Updated last week
- GitHub token permissions Monitor and Advisor actions☆339Updated last week
- Action for generating attestations for workflow artifacts☆61Updated this week
- Reusable workflows for developing actions☆72Updated last week
- Find stale repositories in a GitHub organization.☆190Updated this week
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆58Updated this week
- Template repo for creating container actions using https://github.com/actions/toolkit/☆149Updated this week
- A GitHub Action to send queries to GitHub's GraphQL API☆132Updated last week
- Need to centrally manage and run Actions workflows across multiple repositories? This app does it for you.☆135Updated last year
- GitHub Action to sync GitHub labels in the declarative way☆216Updated 2 years ago
- Generate SBOMs with gh CLI☆193Updated 4 months ago
- Runner Container Hooks for GitHub Actions☆115Updated 2 weeks ago
- Official GitHub Action for OpenSSF Scorecard.☆338Updated last week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆136Updated this week
- GitHub Action to expose GitHub runtime to the workflow☆81Updated last month
- A Github Action to ensure that actions are pinned to full length commit SHAs☆46Updated this week
- A GitHub (gh) CLI extension to manage the GitHub Actions caches being used in a GitHub repository.☆321Updated last year
- Orchestrate GitHub Actions Security☆299Updated this week
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆96Updated last year
- GitHub Action to check PRs for signed commits☆56Updated last year
- Run shellcheck with reviewdog☆116Updated last month
- Load secrets into GitHub Actions☆47Updated 4 years ago
- Lock Action to support deployment locking for the branch-deploy Action☆47Updated 2 weeks ago
- Get rid of personal access tokens (PAT) and credential management, use temporary GitHub Application access tokens instead!☆152Updated this week
- GitHub Action that will get a scoped short lived token for Actions workflows using a GitHub Application.☆196Updated 7 months ago
- Example of using Actions OIDC token to proxy into a private network☆99Updated 6 months ago
- Impersonate a GitHub App Token inside Actions☆61Updated 5 years ago